mirror of
https://github.com/storytold/photocraft.git
synced 2026-10-23 16:25:57 +02:00
Michael HigginsandClaude Opus 5.5
b24c0360f1
ruzstd before 0.9.1 lets a crafted zstd input under 128 KB allocate several gigabytes at once. PhotoCraft decodes zstd when it opens .pcraft and Affinity files, so such a file could end the process with an out-of-memory abort. Raise the minimum in both crates that use it and update the lockfile from 0.9.0 to 0.9.1. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
23 lines
513 B
TOML
23 lines
513 B
TOML
[package]
|
|
name = "photocraft-affinity"
|
|
description = "Bounded reader for native Affinity documents: archive, object stream and document model"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
rust-version.workspace = true
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[features]
|
|
# Synthetic-container builders for tests and fuzz seeds; not an Affinity exporter.
|
|
synth = []
|
|
|
|
[dependencies]
|
|
crc32fast = "1.5"
|
|
flate2 = { workspace = true }
|
|
ruzstd = "0.9.1"
|
|
|
|
[dev-dependencies]
|
|
proptest = { workspace = true }
|